IBM QRadar WinCollect Agent privilege escalation

CVE-2023-26277

What is CVE-2023-26277?

The IBM QRadar WinCollect Agent versions 10.0 through 10.1.3 is susceptible to a local privilege escalation issue allowing a local user to execute arbitrary commands. This vulnerability arises from the agent running with excessive privileges, which could potentially be exploited by malicious actors to gain unauthorized access to system functions. It is crucial for organizations using affected versions to implement the appropriate security measures to mitigate the risk of exploitation.

References